Cannot uninstall Sophos AV Standalone from home machine - because Sophos client firewall cannot be removed either.

Hello Graham,

according to the message the LaunchCondition checking the OS version fails - though it shouldn't.

Could you try running it from the command line MsiExec.exe /X{A805FB2A-A844-4cba-8088-CA64087D59E1} /qn REBOOT=SUPPRESS /L*v %windir%\Temp\SCFUninstallLog.txt and post the log?

Christian

Thanks Christian

I tried that, ran it from Windows Run... that didn't work

Then I opened dos command line
cmd then C:\ and tried again.

Went to uninstall and the error message repeated.

Graham

Hello Christain

Nothing in Windows\temp

Searching my system i cannot find msiexe.exe.

I am running Windows 10 and a google search would indicate that msiexe.exe is not a Window 10 system file

Graham

Hello Graham,

it's msiexeC.exe.

Christian

Hello Christian

The file is on the system.

i have run again from both Windows & Cdm. No file has been created in C:\Temp, Uninstall still shows the same error code.

Sorry for being a pain.

Graham

Hello Graham,

run again from both
msiexec.exe should be run from an administrative cmd window (Command Prompt (Admin)). The command I've suggested should write to C:\Windows\Temp\SCFUninstallLog.txt (but if it's not running from an Admin prompt it's likely not able to do so).

Uninstall still shows the same error code
msiexec.exe /x is an uninstall, with this product code it is the same uninstall that runs from Programs and Features. I've asked you to run msiexec so that a log is created which is needed to determine why the uninstall fails. I did not expect msiexec to succeed, and naturally if it fails Uninstall will also still fail - but in case msiexec succeeds SCF would be gone from Programs and Features.

Christian

Works & I have the log file.  

=== Verbose logging started: 12/01/2018 08:14:11 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\WINDOWS\system32\MsiExec.exe ===
MSI (c) (CC:74) [08:14:11:184]: Resetting cached policy values
MSI (c) (CC:74) [08:14:11:184]: Machine policy value 'Debug' is 0
MSI (c) (CC:74) [08:14:11:184]: ******* RunEngine:
******* Product: {A805FB2A-A844-4cba-8088-CA64087D59E1}
******* Action:
******* CommandLine: **********
MSI (c) (CC:74) [08:14:11:185]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (CC:74) [08:14:11:185]: Grabbed execution mutex.
MSI (c) (CC:74) [08:14:11:199]: Cloaking enabled.
MSI (c) (CC:74) [08:14:11:199]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (CC:74) [08:14:11:203]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (B0:50) [08:14:11:213]: Running installation inside multi-package transaction {A805FB2A-A844-4cba-8088-CA64087D59E1}
MSI (s) (B0:50) [08:14:11:213]: Grabbed execution mutex.
MSI (s) (B0:60) [08:14:11:216]: Resetting cached policy values
MSI (s) (B0:60) [08:14:11:216]: Machine policy value 'Debug' is 0
MSI (s) (B0:60) [08:14:11:216]: ******* RunEngine:
******* Product: {A805FB2A-A844-4cba-8088-CA64087D59E1}
******* Action:
******* CommandLine: **********
MSI (s) (B0:60) [08:14:11:216]: Machine policy value 'DisableUserInstalls' is 0
MSI (s) (B0:60) [08:14:11:216]: MainEngineThread is returning 1605
MSI (s) (B0:50) [08:14:11:218]: User policy value 'DisableRollback' is 0
MSI (s) (B0:50) [08:14:11:218]: Machine policy value 'DisableRollback' is 0
MSI (s) (B0:50) [08:14:11:218]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (B0:50) [08:14:11:220]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (c) (CC:74) [08:14:11:222]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (c) (CC:74) [08:14:11:237]: MainEngineThread is returning 1605
=== Verbose logging stopped: 12/01/2018 08:14:11 ===

Hope this helps... sorry i really should read instructions more closely... Thanks

Graham

Hello Graham,

1605 means the product isn't installed. Is SCF still in Programs and Features (you might also want to check the registry as outlines under Gather the uninstall commands in this How to ... article)?

Christian

Good morning

There were two entries one for Sophos Client Fire Wall, the other for Sophos Anti-Virus

MsiExec.exe /X{12C00299-B8B4-40D3-9663-66ABEA3198AB}   ..sophos client firewall
MsiExec.exe /X{65323B2D-83D4-470D-A209-D769DB30BBDB} .. sophos Ant-Virus

I followed the instruction and attach the log file.

However, when i tried again to un-install the Sophos Firewall still gives the same error code.

Have a great weekend and i love the photo.

Graham

=== Verbose logging started: 12/01/2018 17:07:27 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\WINDOWS\system32\msiexec.exe ===
MSI (c) (9C:30) [17:07:27:241]: Resetting cached policy values
MSI (c) (9C:30) [17:07:27:242]: Machine policy value 'Debug' is 0
MSI (c) (9C:30) [17:07:27:242]: ******* RunEngine:
******* Product: {12C00299-B8B4-40D3-9663-66ABEA3198AB}
******* Action:
******* CommandLine: **********
MSI (c) (9C:30) [17:07:27:242]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (9C:30) [17:07:27:242]: Grabbed execution mutex.
MSI (c) (9C:30) [17:07:27:252]: Cloaking enabled.
MSI (c) (9C:30) [17:07:27:252]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (9C:30) [17:07:27:256]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (CC:FC) [17:07:27:263]: Running installation inside multi-package transaction {12C00299-B8B4-40D3-9663-66ABEA3198AB}
MSI (s) (CC:FC) [17:07:27:263]: Grabbed execution mutex.
MSI (s) (CC:98) [17:07:27:266]: Resetting cached policy values
MSI (s) (CC:98) [17:07:27:266]: Machine policy value 'Debug' is 0
MSI (s) (CC:98) [17:07:27:266]: ******* RunEngine:
******* Product: {12C00299-B8B4-40D3-9663-66ABEA3198AB}
******* Action:
******* CommandLine: **********
MSI (s) (CC:98) [17:07:27:266]: Machine policy value 'DisableUserInstalls' is 0
MSI (s) (CC:98) [17:07:27:268]: Note: 1: 2203 2: C:\WINDOWS\Installer\inprogressinstallinfo.ipi 3: -2147287038
MSI (s) (CC:98) [17:07:27:272]: SRSetRestorePoint skipped for this transaction.
MSI (s) (CC:98) [17:07:27:273]: MSCOREE not loaded loading copy from system32
MSI (s) (CC:98) [17:07:27:279]: End dialog not enabled
MSI (s) (CC:98) [17:07:27:280]: Original package ==> C:\Windows\Installer\ca4ec1.msi
MSI (s) (CC:98) [17:07:27:280]: Package we're running from ==> C:\Windows\Installer\ca4ec1.msi
MSI (s) (CC:98) [17:07:27:284]: APPCOMPAT: Uninstall Flags override found.
MSI (s) (CC:98) [17:07:27:284]: APPCOMPAT: Uninstall VersionNT override found.
MSI (s) (CC:98) [17:07:27:284]: APPCOMPAT: Uninstall ServicePackLevel override found.
MSI (s) (CC:98) [17:07:27:284]: APPCOMPAT: looking for appcompat database entry with ProductCode '{12C00299-B8B4-40D3-9663-66ABEA3198AB}'.
MSI (s) (CC:98) [17:07:27:284]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (CC:98) [17:07:27:298]: Machine policy value 'DisablePatch' is 0
MSI (s) (CC:98) [17:07:27:298]: Machine policy value 'AllowLockdownPatch' is 0
MSI (s) (CC:98) [17:07:27:299]: Machine policy value 'DisableMsi' is 0
MSI (s) (CC:98) [17:07:27:299]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (CC:98) [17:07:27:299]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (CC:98) [17:07:27:299]: Product {12C00299-B8B4-40D3-9663-66ABEA3198AB} is admin assigned: LocalSystem owns the publish key.
MSI (s) (CC:98) [17:07:27:299]: Product {12C00299-B8B4-40D3-9663-66ABEA3198AB} is managed.
MSI (s) (CC:98) [17:07:27:299]: Running product '{12C00299-B8B4-40D3-9663-66ABEA3198AB}' with elevated privileges: Product is assigned.
MSI (s) (CC:98) [17:07:27:299]: Machine policy value 'DisableLUAPatching' is 0
MSI (s) (CC:98) [17:07:27:299]: Machine policy value 'DisableFlyWeightPatching' is 0
MSI (s) (CC:98) [17:07:27:300]: APPCOMPAT: looking for appcompat database entry with ProductCode '{12C00299-B8B4-40D3-9663-66ABEA3198AB}'.
MSI (s) (CC:98) [17:07:27:300]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (CC:98) [17:07:27:300]: Transforms are not secure.
MSI (s) (CC:98) [17:07:27:300]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\WINDOWS\Temp\Uninstall_SAV9-10_Log.txt'.
MSI (s) (CC:98) [17:07:27:300]: Command Line: REBOOT=SUPPRESS REMOVE=ALL CURRENTDIRECTORY=C:\Users\Graham Home_PB\Documents CLIENTUILEVEL=3 CLIENTPROCESSID=9628
MSI (s) (CC:98) [17:07:27:300]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{1CB67048-8DDF-4A1A-A299-1A1BB5B0653D}'.
MSI (s) (CC:98) [17:07:27:301]: Product Code passed to Engine.Initialize: '{12C00299-B8B4-40D3-9663-66ABEA3198AB}'
MSI (s) (CC:98) [17:07:27:301]: Product Code from property table before transforms: '{12C00299-B8B4-40D3-9663-66ABEA3198AB}'
MSI (s) (CC:98) [17:07:27:301]: Product Code from property table after transforms: '{12C00299-B8B4-40D3-9663-66ABEA3198AB}'
MSI (s) (CC:98) [17:07:27:301]: Product registered: entering maintenance mode
MSI (s) (CC:98) [17:07:27:301]: Determined that existing product (either this product or the product being upgraded with a patch) is installed per-machine.
MSI (s) (CC:98) [17:07:27:301]: Product {12C00299-B8B4-40D3-9663-66ABEA3198AB} is admin assigned: LocalSystem owns the publish key.
MSI (s) (CC:98) [17:07:27:301]: Product {12C00299-B8B4-40D3-9663-66ABEA3198AB} is managed.
MSI (s) (CC:98) [17:07:27:301]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (CC:98) [17:07:27:301]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (CC:98) [17:07:27:301]: MSI_LUA: Installation UI level is silent, no credential elevation is possible
MSI (s) (CC:98) [17:07:27:301]: PROPERTY CHANGE: Adding ProductState property. Its value is '5'.
MSI (s) (CC:98) [17:07:27:301]: PROPERTY CHANGE: Adding ProductToBeRegistered property. Its value is '1'.
MSI (s) (CC:98) [17:07:27:302]: Package name retrieved from configuration data: 'Sophos Client Firewall.msi'
MSI (s) (CC:98) [17:07:27:304]: Note: 1: 2262 2: AdminProperties 3: -2147287038
MSI (s) (CC:98) [17:07:27:304]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (CC:98) [17:07:27:304]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (CC:98) [17:07:27:304]: Product {12C00299-B8B4-40D3-9663-66ABEA3198AB} is admin assigned: LocalSystem owns the publish key.
MSI (s) (CC:98) [17:07:27:304]: Product {12C00299-B8B4-40D3-9663-66ABEA3198AB} is managed.
MSI (s) (CC:98) [17:07:27:304]: Running product '{12C00299-B8B4-40D3-9663-66ABEA3198AB}' with elevated privileges: Product is assigned.
MSI (s) (CC:98) [17:07:27:304]: Machine policy value 'EnableUserControl' is 0
MSI (s) (CC:98) [17:07:27:304]: PROPERTY CHANGE: Adding RestrictedUserControl property. Its value is '1'.
MSI (s) (CC:98) [17:07:27:304]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'SUPPRESS'.
MSI (s) (CC:98) [17:07:27:304]: PROPERTY CHANGE: Adding REMOVE property. Its value is 'ALL'.
MSI (s) (CC:98) [17:07:27:304]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\Users\Graham Home_PB\Documents'.
MSI (s) (CC:98) [17:07:27:304]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'.
MSI (s) (CC:98) [17:07:27:304]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '9628'.
MSI (s) (CC:98) [17:07:27:305]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0
MSI (s) (CC:98) [17:07:27:305]: RESTART MANAGER: Disabled by MSIRESTARTMANAGERCONTROL property; Windows Installer will use the built-in FilesInUse functionality.
MSI (s) (CC:98) [17:07:27:305]: PROPERTY CHANGE: Adding MsiSystemRebootPending property. Its value is '1'.
MSI (s) (CC:98) [17:07:27:305]: TRANSFORMS property is now:
MSI (s) (CC:98) [17:07:27:305]: PROPERTY CHANGE: Adding PRODUCTLANGUAGE property. Its value is '1033'.
MSI (s) (CC:98) [17:07:27:305]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '200'.
MSI (s) (CC:98) [17:07:27:308]: SHELL32::SHGetFolderPath returned: C:\Users\Graham Home_PB\AppData\Roaming
MSI (s) (CC:98) [17:07:27:310]: SHELL32::SHGetFolderPath returned: C:\Users\Graham Home_PB\Favorites
MSI (s) (CC:98) [17:07:27:312]: SHELL32::SHGetFolderPath returned: C:\Users\Graham Home_PB\AppData\Roaming\Microsoft\Windows\Network Shortcuts
MSI (s) (CC:98) [17:07:27:314]: SHELL32::SHGetFolderPath returned: C:\Users\Graham Home_PB\Documents
MSI (s) (CC:98) [17:07:27:316]: SHELL32::SHGetFolderPath returned: C:\Users\Graham Home_PB\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
MSI (s) (CC:98) [17:07:27:318]: SHELL32::SHGetFolderPath returned: C:\Users\Graham Home_PB\AppData\Roaming\Microsoft\Windows\Recent
MSI (s) (CC:98) [17:07:27:320]: SHELL32::SHGetFolderPath returned: C:\Users\Graham Home_PB\AppData\Roaming\Microsoft\Windows\SendTo
MSI (s) (CC:98) [17:07:27:322]: SHELL32::SHGetFolderPath returned: C:\Users\Graham Home_PB\AppData\Roaming\Microsoft\Windows\Templates
MSI (s) (CC:98) [17:07:27:322]: SHELL32::SHGetFolderPath returned: C:\ProgramData
MSI (s) (CC:98) [17:07:27:325]: SHELL32::SHGetFolderPath returned: C:\Users\Graham Home_PB\AppData\Local
MSI (s) (CC:98) [17:07:27:328]: SHELL32::SHGetFolderPath returned: C:\Users\Graham Home_PB\Pictures
MSI (s) (CC:98) [17:07:27:331]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (s) (CC:98) [17:07:27:333]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
MSI (s) (CC:98) [17:07:27:335]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
MSI (s) (CC:98) [17:07:27:337]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
MSI (s) (CC:98) [17:07:27:339]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
MSI (s) (CC:98) [17:07:27:343]: SHELL32::SHGetFolderPath returned: C:\Users\Graham Home_PB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (s) (CC:98) [17:07:27:345]: SHELL32::SHGetFolderPath returned: C:\Users\Graham Home_PB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MSI (s) (CC:98) [17:07:27:348]: SHELL32::SHGetFolderPath returned: C:\Users\Graham Home_PB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
MSI (s) (CC:98) [17:07:27:349]: SHELL32::SHGetFolderPath returned: C:\Users\Graham Home_PB\AppData\Roaming\Microsoft\Windows\Start Menu
MSI (s) (CC:98) [17:07:27:351]: SHELL32::SHGetFolderPath returned: C:\Users\Graham Home_PB\Desktop
MSI (s) (CC:98) [17:07:27:353]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
MSI (s) (CC:98) [17:07:27:354]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\Fonts
MSI (s) (CC:98) [17:07:27:354]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
MSI (s) (CC:98) [17:07:27:367]: MSI_LUA: Setting AdminUser property to 1 because the product is already installed managed and per-machine
MSI (s) (CC:98) [17:07:27:367]: PROPERTY CHANGE: Adding AdminUser property. Its value is '1'.
MSI (s) (CC:98) [17:07:27:367]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.
MSI (s) (CC:98) [17:07:27:367]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'.
MSI (s) (CC:98) [17:07:27:367]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
MSI (s) (CC:98) [17:07:27:367]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Graham Home_PB'.
MSI (s) (CC:98) [17:07:27:367]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (s) (CC:98) [17:07:27:367]: PROPERTY CHANGE: Adding Installed property. Its value is '2010/04/22 18:00:10'.
MSI (s) (CC:98) [17:07:27:367]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\Windows\Installer\ca4ec1.msi'.
MSI (s) (CC:98) [17:07:27:367]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\Windows\Installer\ca4ec1.msi'.
MSI (s) (CC:98) [17:07:27:367]: Machine policy value 'MsiDisableEmbeddedUI' is 0
MSI (s) (CC:98) [17:07:27:367]: EEUI - Disabling MsiEmbeddedUI for service because it's not a quiet/basic install
MSI (s) (CC:98) [17:07:27:368]: Note: 1: 2262 2: PatchPackage 3: -2147287038
MSI (s) (CC:98) [17:07:27:368]: Machine policy value 'DisableRollback' is 0
MSI (s) (CC:98) [17:07:27:368]: User policy value 'DisableRollback' is 0
MSI (s) (CC:98) [17:07:27:368]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
MSI (s) (CC:98) [17:07:27:368]: Note: 1: 2262 2: Font 3: -2147287038
=== Logging started: 12/01/2018 17:07:27 ===
MSI (s) (CC:98) [17:07:27:369]: Note: 1: 2203 2: C:\WINDOWS\Installer\inprogressinstallinfo.ipi 3: -2147287038
MSI (s) (CC:98) [17:07:27:369]: PROPERTY CHANGE: Adding Preselected property. Its value is '1'.
MSI (s) (CC:98) [17:07:27:369]: PROPERTY CHANGE: Modifying VersionNT property. Its current value is '603'. Its new value: '601'.
MSI (s) (CC:98) [17:07:27:369]: PROPERTY CHANGE: Modifying VersionNT64 property. Its current value is '603'. Its new value: '601'.
MSI (s) (CC:98) [17:07:27:369]: PROPERTY CHANGE: Modifying ServicePackLevel property. Its current value is '0'. Its new value: '14'.
MSI (s) (CC:98) [17:07:27:369]: APPCOMPAT: [DetectVersionLaunchCondition] Launch condition version successfully detected.
MSI (s) (CC:98) [17:07:27:369]: PROPERTY CHANGE: Modifying VersionNT property. Its current value is '601'. Its new value: '603'.
MSI (s) (CC:98) [17:07:27:369]: PROPERTY CHANGE: Modifying ServicePackLevel property. Its current value is '14'. Its new value: '0'.
MSI (s) (CC:98) [17:07:27:369]: PROPERTY CHANGE: Modifying VersionNT64 property. Its current value is '601'. Its new value: '603'.
MSI (s) (CC:98) [17:07:27:370]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
MSI (s) (CC:98) [17:07:27:370]: Doing action: INSTALL
Action start 17:07:27: INSTALL.
MSI (s) (CC:98) [17:07:27:371]: Running ExecuteSequence
MSI (s) (CC:98) [17:07:27:371]: Doing action: ProgramFilesFolder.B817F5915D4641D694EABCC98F20F7B7
MSI (s) (CC:98) [17:07:27:372]: Note: 1: 2235 2: 3: ExtendedType 4: SELECT `Action`,`Type`,`Source`,`Target`, NULL, `ExtendedType` FROM `CustomAction` WHERE `Action` = 'ProgramFilesFolder.B817F5915D4641D694EABCC98F20F7B7'
MSI (s) (CC:98) [17:07:27:372]: PROPERTY CHANGE: Adding ProgramFilesFolder.B817F5915D4641D694EABCC98F20F7B7 property. Its value is 'C:\Program Files (x86)\'.
Action start 17:07:27: ProgramFilesFolder.B817F5915D4641D694EABCC98F20F7B7.
MSI (s) (CC:98) [17:07:27:373]: Doing action: CommonFilesFolder.B817F5915D4641D694EABCC98F20F7B7
Action ended 17:07:27: ProgramFilesFolder.B817F5915D4641D694EABCC98F20F7B7. Return value 1.
MSI (s) (CC:98) [17:07:27:374]: Note: 1: 2235 2: 3: ExtendedType 4: SELECT `Action`,`Type`,`Source`,`Target`, NULL, `ExtendedType` FROM `CustomAction` WHERE `Action` = 'CommonFilesFolder.B817F5915D4641D694EABCC98F20F7B7'
MSI (s) (CC:98) [17:07:27:374]: PROPERTY CHANGE: Adding CommonFilesFolder.B817F5915D4641D694EABCC98F20F7B7 property. Its value is 'C:\Program Files (x86)\Common Files\'.
Action start 17:07:27: CommonFilesFolder.B817F5915D4641D694EABCC98F20F7B7.
MSI (s) (CC:98) [17:07:27:374]: Doing action: WindowsFolder.63E949F6_03BC_5C40_FF1F_C8B3B9A1E18E
Action ended 17:07:27: CommonFilesFolder.B817F5915D4641D694EABCC98F20F7B7. Return value 1.
MSI (s) (CC:98) [17:07:27:375]: Note: 1: 2235 2: 3: ExtendedType 4: SELECT `Action`,`Type`,`Source`,`Target`, NULL, `ExtendedType` FROM `CustomAction` WHERE `Action` = 'WindowsFolder.63E949F6_03BC_5C40_FF1F_C8B3B9A1E18E'
MSI (s) (CC:98) [17:07:27:375]: PROPERTY CHANGE: Adding WindowsFolder.63E949F6_03BC_5C40_FF1F_C8B3B9A1E18E property. Its value is 'C:\WINDOWS\'.
Action start 17:07:27: WindowsFolder.63E949F6_03BC_5C40_FF1F_C8B3B9A1E18E.
MSI (s) (CC:98) [17:07:27:376]: Doing action: SystemFolder.63E949F6_03BC_5C40_FF1F_C8B3B9A1E18E
Action ended 17:07:27: WindowsFolder.63E949F6_03BC_5C40_FF1F_C8B3B9A1E18E. Return value 1.
MSI (s) (CC:98) [17:07:27:377]: Note: 1: 2235 2: 3: ExtendedType 4: SELECT `Action`,`Type`,`Source`,`Target`, NULL, `ExtendedType` FROM `CustomAction` WHERE `Action` = 'SystemFolder.63E949F6_03BC_5C40_FF1F_C8B3B9A1E18E'
MSI (s) (CC:98) [17:07:27:377]: PROPERTY CHANGE: Adding SystemFolder.63E949F6_03BC_5C40_FF1F_C8B3B9A1E18E property. Its value is 'C:\WINDOWS\SysWOW64\'.
Action start 17:07:27: SystemFolder.63E949F6_03BC_5C40_FF1F_C8B3B9A1E18E.
MSI (s) (CC:98) [17:07:27:377]: Doing action: WindowsFolder.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E
Action ended 17:07:27: SystemFolder.63E949F6_03BC_5C40_FF1F_C8B3B9A1E18E. Return value 1.
MSI (s) (CC:98) [17:07:27:378]: Note: 1: 2235 2: 3: ExtendedType 4: SELECT `Action`,`Type`,`Source`,`Target`, NULL, `ExtendedType` FROM `CustomAction` WHERE `Action` = 'WindowsFolder.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E'
MSI (s) (CC:98) [17:07:27:378]: PROPERTY CHANGE: Adding WindowsFolder.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E property. Its value is 'C:\WINDOWS\'.
Action start 17:07:27: WindowsFolder.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E.
MSI (s) (CC:98) [17:07:27:379]: Doing action: SystemFolder.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E
Action ended 17:07:27: WindowsFolder.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E. Return value 1.
MSI (s) (CC:98) [17:07:27:380]: Note: 1: 2235 2: 3: ExtendedType 4: SELECT `Action`,`Type`,`Source`,`Target`, NULL, `ExtendedType` FROM `CustomAction` WHERE `Action` = 'SystemFolder.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E'
MSI (s) (CC:98) [17:07:27:380]: PROPERTY CHANGE: Adding SystemFolder.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E property. Its value is 'C:\WINDOWS\SysWOW64\'.
Action start 17:07:27: SystemFolder.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E.
MSI (s) (CC:98) [17:07:27:381]: Doing action: ISSetupFilesExtract
Action ended 17:07:27: SystemFolder.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E. Return value 1.
MSI (s) (CC:98) [17:07:27:382]: Note: 1: 2235 2: 3: ExtendedType 4: SELECT `Action`,`Type`,`Source`,`Target`, NULL, `ExtendedType` FROM `CustomAction` WHERE `Action` = 'ISSetupFilesExtract'
MSI (s) (CC:14) [17:07:27:399]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI3545.tmp, Entrypoint: SFStartupEx
MSI (s) (CC:CC) [17:07:27:399]: Generating random cookie.
MSI (s) (CC:CC) [17:07:27:403]: Created Custom Action Server with PID 10992 (0x2AF0).
MSI (s) (CC:00) [17:07:27:475]: Running as a service.
MSI (s) (CC:00) [17:07:27:480]: Hello, I'm your 32bit Impersonated custom action server.
Action start 17:07:27: ISSetupFilesExtract.
1: Starting to extract setup files
1: Getting SUPPORTDIR property :
1: Extracting SetupFiles to: C:\Users\GRAHAM~1\AppData\Local\Temp\{12C00299-B8B4-40D3-9663-66ABEA3198AB}
1: Getting ISSetupFile table view
1: Executing ISSetupFile table view
1: Extracting Setup File:
1: C:\Users\GRAHAM~1\AppData\Local\Temp\{12C00299-B8B4-40D3-9663-66ABEA3198AB}\DriverHelper_x64.exe
1: Extracting Setup File:
1: C:\Users\GRAHAM~1\AppData\Local\Temp\{12C00299-B8B4-40D3-9663-66ABEA3198AB}\DriverHelper_Win32.exe
MSI (s) (CC!A0) [17:07:27:812]: PROPERTY CHANGE: Adding SUPPORTDIR property. Its value is 'C:\Users\GRAHAM~1\AppData\Local\Temp\{12C00299-B8B4-40D3-9663-66ABEA3198AB}'.
MSI (s) (CC!A0) [17:07:27:812]: PROPERTY CHANGE: Adding ISSETUPFILESCOMPLETED property. Its value is 'Completed'.
1: Setting SUPPORTDIR property to: C:\Users\GRAHAM~1\AppData\Local\Temp\{12C00299-B8B4-40D3-9663-66ABEA3198AB}
1: Setting ISSETUPFILESCOMPLETED property
MSI (s) (CC:98) [17:07:27:816]: Doing action: AppSearch
Action ended 17:07:27: ISSetupFilesExtract. Return value 1.
Action start 17:07:27: AppSearch.
MSI (s) (CC:98) [17:07:27:818]: Note: 1: 2262 2: CompLocator 3: -2147287038
MSI (s) (CC:98) [17:07:27:818]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{FED1005D-CBC8-45D5-A288-FFC7BB304121} 3: 2
MSI (s) (CC:98) [17:07:27:818]: Note: 1: 2262 2: IniLocator 3: -2147287038
MSI (s) (CC:98) [17:07:27:818]: Note: 1: 2262 2: DrLocator 3: -2147287038
MSI (s) (CC:98) [17:07:27:819]: Note: 1: 2262 2: CompLocator 3: -2147287038
MSI (s) (CC:98) [17:07:27:819]: PROPERTY CHANGE: Adding SAV6 property. Its value is 'YES'.
MSI (s) (CC:98) [17:07:27:819]: Doing action: LaunchConditions
Action ended 17:07:27: AppSearch. Return value 1.
Action start 17:07:27: LaunchConditions.
MSI (s) (CC:98) [17:07:27:821]: Product: Sophos Client Firewall -- The operating system does not support running Sophos Client Firewall.

The operating system does not support running Sophos Client Firewall.
Action ended 17:07:27: LaunchConditions. Return value 3.
Action ended 17:07:27: INSTALL. Return value 3.
Property(S): DiskPrompt = [1]
Property(S): Registration = No
Property(S): UpgradeCode = {7EDA9D28-FF94-4FC8-938F-98BE1E3D7F76}
Property(S): Installed = 2010/04/22 18:00:10
Property(S): VersionNT = 603
Property(S): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
Property(S): CommonAppDataFolder = C:\ProgramData\
Property(S): CommonFiles64Folder = C:\Program Files\Common Files\
Property(S): CommonFilesFolder = C:\Program Files (x86)\Common Files\
Property(S): DesktopFolder = C:\Users\Public\Desktop\
Property(S): FavoritesFolder = C:\Users\Graham Home_PB\Favorites\
Property(S): FontsFolder = C:\WINDOWS\Fonts\
Property(S): ProgramFilesFolder = C:\Program Files (x86)\
Property(S): LocalAppDataFolder = C:\Users\Graham Home_PB\AppData\Local\
Property(S): MyPicturesFolder = C:\Users\Graham Home_PB\Pictures\
Property(S): PersonalFolder = C:\Users\Graham Home_PB\Documents\
Property(S): ProgramFiles64Folder = C:\Program Files\
Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
Property(S): SendToFolder = C:\Users\Graham Home_PB\AppData\Roaming\Microsoft\Windows\SendTo\
Property(S): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\
Property(S): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Property(S): System64Folder = C:\WINDOWS\system32\
Property(S): SystemFolder = C:\WINDOWS\SysWOW64\
Property(S): TempFolder = C:\Users\GRAHAM~1\AppData\Local\Temp\
Property(S): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\
Property(S): WindowsFolder = C:\WINDOWS\
Property(S): WindowsVolume = C:\
Property(S): WindowsFolder.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E = C:\WINDOWS\
Property(S): SystemFolder.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E = C:\WINDOWS\SysWOW64\
Property(S): ALLUSERS = 1
Property(S): WindowsFolder.63E949F6_03BC_5C40_FF1F_C8B3B9A1E18E = C:\WINDOWS\
Property(S): SystemFolder.63E949F6_03BC_5C40_FF1F_C8B3B9A1E18E = C:\WINDOWS\SysWOW64\
Property(S): ProgramFilesFolder.B817F5915D4641D694EABCC98F20F7B7 = C:\Program Files (x86)\
Property(S): CommonFilesFolder.B817F5915D4641D694EABCC98F20F7B7 = C:\Program Files (x86)\Common Files\
Property(S): RecentFolder = C:\Users\Graham Home_PB\AppData\Roaming\Microsoft\Windows\Recent\
Property(S): PrintHoodFolder = C:\Users\Graham Home_PB\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\
Property(S): NetHoodFolder = C:\Users\Graham Home_PB\AppData\Roaming\Microsoft\Windows\Network Shortcuts\
Property(S): AppDataFolder = C:\Users\Graham Home_PB\AppData\Roaming\
Property(S): RemoteAdminTS = 1
Property(S): MsiNTProductType = 1
Property(S): ServicePackLevelMinor = 0
Property(S): ServicePackLevel = 0
Property(S): MANAGED_INSTALL = 0
Property(S): SAV6 = YES
Property(S): ISCHECKFORPRODUCTUPDATES = 1
Property(S): ApplicationUsers = AllUsers
Property(S): AgreeToLicense = No
Property(S): _IsMaintenance = Change
Property(S): IS_SQLSERVER_USERNAME = sa
Property(S): IS_SQLSERVER_AUTHENTICATION = 0
Property(S): SetupType = Typical
Property(S): _IsSetupTypeMin = Typical
Property(S): Display_IsBitmapDlg = 1
Property(S): ARPCOMMENTS = Firewall protection
Property(S): ARPCONTACT = Sophos Technical Support
Property(S): ARPHELPLINK = http://www.sophos.com/support/
Property(S): ARPNOMODIFY = 1
Property(S): ARPNOREPAIR = 1
Property(S): ARPPRODUCTICON = ARPPRODUCTICON.exe
Property(S): ARPURLINFOABOUT = http://www.sophos.com/
Property(S): ARPURLUPDATEINFO = www.sophos.com/.../updates
Property(S): DWUSINTERVAL = 30
Property(S): DWUSLINK = CEBCE7CFAEEBE7FF2EACC0AF3E4C978F89EC978F49BBF0C8CEDC47DFDE8BA0189EEC80AFC9AC
Property(S): DefaultUIFont = Tahoma8
Property(S): DialogCaption = InstallShield for Windows Installer
Property(S): DisplayNameCustom = Custom
Property(S): WindowsBuild = 9600
Property(S): DisplayNameMinimal = Minimal
Property(S): DisplayNameTypical = Typical
Property(S): ErrorDialog = SetupError
Property(S): INSTALLLEVEL = 100
Property(S): ISSCRIPT_VERSION_MISSING = The InstallScript engine is missing from this machine. If available, please run ISScript.msi, or contact your support personnel for further assistance.
Property(S): ISSCRIPT_VERSION_OLD = The InstallScript engine on this machine is older than the version required to run this setup. If available, please install the latest version of ISScript.msi, or contact your support personnel for further assistance.
Property(S): ISVROOT_PORT_NO = 0
Property(S): IS_COMPLUS_PROGRESSTEXT_COST = Costing COM+ application: [1]
Property(S): IS_COMPLUS_PROGRESSTEXT_INSTALL = Installing COM+ application: [1]
Property(S): IS_COMPLUS_PROGRESSTEXT_UNINSTALL = Uninstalling COM+ application: [1]
Property(S): IS_PROGMSG_XML_COSTING = Costing XML files...
Property(S): IS_PROGMSG_XML_CREATE_FILE = Creating XML file %s...
Property(S): IS_PROGMSG_XML_FILES = Performing XML file changes...
Property(S): IS_PROGMSG_XML_REMOVE_FILE = Removing XML file %s...
Property(S): IS_PROGMSG_XML_ROLLBACK_FILES = Rolling back XML file changes...
Property(S): IS_PROGMSG_XML_UPDATE_FILE = Updating XML file %s...
Property(S): InstallChoice = AR
Property(S): MSIRESTARTMANAGERCONTROL = Disable
Property(S): Manufacturer = Sophos Plc
Property(S): NewProperty1 = 0
Property(S): NewProperty2 = 0
Property(S): PIDTemplate = 12345<###-%%%%%%%>@@@@@
Property(S): PROGMSG_IIS_CREATEAPPPOOL = Creating application pool %s
Property(S): PROGMSG_IIS_CREATEAPPPOOLS = Creating application Pools...
Property(S): PROGMSG_IIS_CREATEVROOT = Creating IIS virtual directory %s
Property(S): PROGMSG_IIS_CREATEVROOTS = Creating IIS virtual directories...
Property(S): PROGMSG_IIS_CREATEWEBSERVICEEXTENSION = Creating web service extension
Property(S): PROGMSG_IIS_CREATEWEBSERVICEEXTENSIONS = Creating web service extensions...
Property(S): PROGMSG_IIS_EXTRACT = Extracting information for IIS virtual directories...
Property(S): PROGMSG_IIS_EXTRACTDONE = Extracted information for IIS virtual directories...
Property(S): PROGMSG_IIS_REMOVEAPPPOOL = Removing application pool
Property(S): PROGMSG_IIS_REMOVEAPPPOOLS = Removing application pools...
Property(S): PROGMSG_IIS_REMOVESITE = Removing web site at port %d
Property(S): PROGMSG_IIS_REMOVEVROOT = Removing IIS virtual directory %s
Property(S): PROGMSG_IIS_REMOVEVROOTS = Removing IIS virtual directories...
Property(S): PROGMSG_IIS_REMOVEWEBSERVICEEXTENSION = Removing web service extension
Property(S): PROGMSG_IIS_REMOVEWEBSERVICEEXTENSIONS = Removing web service extensions...
Property(S): PROGMSG_IIS_ROLLBACKAPPPOOLS = Rolling back application pools...
Property(S): PROGMSG_IIS_ROLLBACKVROOTS = Rolling back virtual directory and web site changes...
Property(S): VersionNT64 = 603
Property(S): PROGMSG_IIS_ROLLBACKWEBSERVICEEXTENSIONS = Rolling back web service extensions...
Property(S): ProductCode = {12C00299-B8B4-40D3-9663-66ABEA3198AB}
Property(S): ProductID = none
Property(S): ProductLanguage = 1033
Property(S): ProductName = Sophos Client Firewall
Property(S): ProductVersion = 2.5.0
Property(S): ProgressType0 = install
Property(S): ProgressType1 = Installing
Property(S): ProgressType2 = installed
Property(S): ProgressType3 = installs
Property(S): RESTART_SERVICES = 1
Property(S): RebootYesNo = Yes
Property(S): RegisterWithAutoUpdate = {4DB41E90-DC56-41DC-B91E-9B8E537489A8};scf
Property(S): ReinstallModeText = omus
Property(S): SHOWLAUNCHPROGRAM = 0
Property(S): SecureCustomProperties = MAJORUPGRADEINSTALL
Property(S): UNINSTALLDRIVERS = ALL
Property(S): UPGRADE_DRIVER_REBOOT = 0
Property(S): VersionMsi = 5.00
Property(S): InstallShieldTempProp = 0
Property(S): VersionDatabase = 200
Property(S): PRODUCTLANGUAGE = 1033
Property(S): MsiSystemRebootPending = 1
Property(S): CLIENTPROCESSID = 9628
Property(S): CLIENTUILEVEL = 3
Property(S): CURRENTDIRECTORY = C:\Users\Graham Home_PB\Documents
Property(S): REMOVE = ALL
Property(S): USERNAME = Graham Home_PB
Property(S): REBOOT = SUPPRESS
Property(S): RestrictedUserControl = 1
Property(S): ProductToBeRegistered = 1
Property(S): ProductState = 5
Property(S): PackageCode = {1CB67048-8DDF-4A1A-A299-1A1BB5B0653D}
Property(S): MsiLogFileLocation = C:\WINDOWS\Temp\Uninstall_SAV9-10_Log.txt
Property(S): GPTSupport = 1
Property(S): OLEAdvtSupport = 1
Property(S): ShellAdvtSupport = 1
Property(S): MsiAMD64 = 6
Property(S): Msix64 = 6
Property(S): Intel = 6
Property(S): PhysicalMemory = 3036
Property(S): VirtualMemory = 2059
Property(S): LogonUser = Graham Home_PB
Property(S): UserSID = S-1-5-21-3334529122-838391252-138077349-1000
Property(S): UserLanguageID = 2057
Property(S): ComputerName = GRAHAMHOME_PB
Property(S): SystemLanguageID = 2057
Property(S): ScreenX = 1024
Property(S): ScreenY = 768
Property(S): CaptionHeight = 23
Property(S): BorderTop = 1
Property(S): BorderSide = 1
Property(S): MsiTabletPC = 1
Property(S): TextHeight = 16
Property(S): TextInternalLeading = 3
Property(S): ColorBits = 32
Property(S): TTCSupport = 1
Property(S): Time = 17:07:27
Property(S): Date = 12/01/2018
Property(S): MsiNetAssemblySupport = 4.7.2556.0
Property(S): MsiWin32AssemblySupport = 6.3.16299.15
Property(S): RedirectedDllSupport = 2
Property(S): AdminUser = 1
Property(S): MsiRunningElevated = 1
Property(S): Privileged = 1
Property(S): DATABASE = C:\Windows\Installer\ca4ec1.msi
Property(S): OriginalDatabase = C:\Windows\Installer\ca4ec1.msi
Property(S): UILevel = 2
Property(S): Preselected = 1
Property(S): ACTION = INSTALL
Property(S): SUPPORTDIR = C:\Users\GRAHAM~1\AppData\Local\Temp\{12C00299-B8B4-40D3-9663-66ABEA3198AB}
Property(S): ISSETUPFILESCOMPLETED = Completed
MSI (s) (CC:98) [17:07:27:891]: Note: 1: 1725
MSI (s) (CC:98) [17:07:27:892]: Product: Sophos Client Firewall -- Removal failed.

MSI (s) (CC:98) [17:07:27:893]: Windows Installer removed the product. Product Name: Sophos Client Firewall. Product Version: 2.5.0. Product Language: 1033. Manufacturer: Sophos Plc. Removal success or error status: 1603.

MSI (s) (CC:98) [17:07:27:896]: Deferring clean up of packages/files, if any exist
MSI (s) (CC:98) [17:07:27:897]: MainEngineThread is returning 1603
MSI (s) (CC:FC) [17:07:27:897]: No System Restore sequence number for this installation.
=== Logging stopped: 12/01/2018 17:07:27 ===
MSI (s) (CC:FC) [17:07:27:899]: User policy value 'DisableRollback' is 0
MSI (s) (CC:FC) [17:07:27:899]: Machine policy value 'DisableRollback' is 0
MSI (s) (CC:FC) [17:07:27:899]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (CC:FC) [17:07:27:900]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (s) (CC:FC) [17:07:27:901]: Destroying RemoteAPI object.
MSI (s) (CC:CC) [17:07:27:901]: Custom Action Manager thread ending.
MSI (c) (9C:30) [17:07:27:905]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (c) (9C:30) [17:07:27:906]: MainEngineThread is returning 1603
=== Verbose logging stopped: 12/01/2018 17:07:27 ===

Given this error:

MSI (s) (CC:98) [17:07:27:819]: Doing action: LaunchConditions
Action ended 17:07:27: AppSearch. Return value 1.
Action start 17:07:27: LaunchConditions.
MSI (s) (CC:98) [17:07:27:821]: Product: Sophos Client Firewall -- The operating system does not support running Sophos Client Firewall.

The operating system does not support running Sophos Client Firewall.
Action ended 17:07:27: LaunchConditions. Return value 3.
Action ended 17:07:27: INSTALL. Return value 3.

I wonder if you could bypass this by editing the MSI file you're using to uninstall.  How about:

1. Locate the file "Sophos Client Firewall.msi" which is in the AutoUpdate Cache directory. E..g \programdata\sophos\autoupdate\cache\...  I assume this is the same version as the version installed.  If not maybe try taking a copy of C:\Windows\Installer\ca4ec1.msi and editing that.

2. Make a copy of it "Sophos Client Firewall.msi" so you have a backup.

3. Create a new text file called editMSI.vbs (ensure it has the extension .vbs and not .vbs.txt) and paste the following.

Dim oInstaller : Set oInstaller = CreateObject("WindowsInstaller.Installer")
Dim oDatabase : Set oDatabase = oInstaller.OpenDatabase(WScript.Arguments(0),1)
Dim sql : sql = "delete FROM `InstallExecuteSequence` WHERE `Action` = 'LaunchConditions'"
Dim oUpdate : Set regView = oDatabase.OpenView(sql)
oUpdate.Execute
oDatabase.Commit
oUpdate.Close
Set oUpdate = Nothing
Set oDatabase = Nothing
Set oInstaller = Nothing

4. Save the VBS file next to the "Sophos Client Firewall.msi" file.

5. In a command prompt CD to the location of the file and run:
cscript editmsi.vbs "Sophos Client Firewall.msi"

This should update the file  "Sophos Client Firewall.msi", deleting the LaunchConditions action from the InstallExeccuteSequence table.

6. Once edited, you could use this MSI to uninstall.

MsiExec.exe /x "Sophos Client Firewall.msi" /qn REBOOT=SUPPRESS /L*v %windir%\Temp\SCFUninstallLog.txt 

If this fails, maybe change the VBS line:

Dim sql : sql = "delete FROM `InstallExecuteSequence` WHERE `Action` = 'LaunchConditions'"

To

Dim sql : sql = "delete FROM `InstallUISequence` WHERE `Action` = 'LaunchConditions'"

To update the MSI file a second time (updating the other table that references this action) before retrying.

Hope it help.

Regards,

Jak

jak

Thanks, i followed the instructions but i am afraid it has not resulted in uninstall sophos cient firewall.. the same error still appears.

Here is the log file

=== Verbose logging started: 14/01/2018 13:03:47 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\WINDOWS\system32\MsiExec.exe ===
MSI (c) (34:90) [13:03:47:212]: Resetting cached policy values
MSI (c) (34:90) [13:03:47:212]: Machine policy value 'Debug' is 0
MSI (c) (34:90) [13:03:47:212]: ******* RunEngine:
******* Product: Sophos Client Firewall.msi
******* Action:
******* CommandLine: **********
MSI (c) (34:90) [13:03:47:213]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (34:90) [13:03:50:214]: Failed to grab execution mutex. System error 258.
MSI (c) (34:90) [13:03:50:267]: Cloaking enabled.
MSI (c) (34:90) [13:03:50:267]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (34:90) [13:03:50:282]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (8C:48) [13:03:50:290]: Running installation inside multi-package transaction C:\WINDOWS\system32\Sophos Client Firewall.msi
MSI (s) (8C:48) [13:03:50:290]: Grabbed execution mutex.
MSI (s) (8C:7C) [13:03:50:293]: Resetting cached policy values
MSI (s) (8C:7C) [13:03:50:293]: Machine policy value 'Debug' is 0
MSI (s) (8C:7C) [13:03:50:293]: ******* RunEngine:
******* Product: C:\WINDOWS\system32\Sophos Client Firewall.msi
******* Action:
******* CommandLine: **********
MSI (s) (8C:7C) [13:03:50:293]: Note: 1: 2203 2: C:\WINDOWS\system32\Sophos Client Firewall.msi 3: -2147287038
MSI (s) (8C:7C) [13:03:50:294]: MainEngineThread is returning 2
MSI (s) (8C:48) [13:03:50:296]: User policy value 'DisableRollback' is 0
MSI (s) (8C:48) [13:03:50:296]: Machine policy value 'DisableRollback' is 0
MSI (s) (8C:48) [13:03:50:297]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (8C:48) [13:03:50:298]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (c) (34:90) [13:03:50:301]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (c) (34:90) [13:03:50:302]: MainEngineThread is returning 2
=== Verbose logging stopped: 14/01/2018 13:03:50 ===

This message:

Failed to grab execution mutex. System error 258.

would suggest that MSI is performing another installation.

If you wait/reboot and try again, do you keep getting this?

Regards,

Jak

This message:

Failed to grab execution mutex. System error 258.

would suggest that MSI is performing another installation.

If you wait/reboot and try again, do you keep getting this?

Regards,

Jak